Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Ultimate Volume Booster

CRITICAL RISKRemoved from Chrome Web Store

Ultimate Volume Booster

ID: hcfnhafpadfnabbnjnhdfdacolpmdbjo

Could be malicious

Supported Languages

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇬🇧British English

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇳Hindi

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇺🇸US English

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

1.2.1

Size

0.09 MB

Rating

4.6/5

Reviews

3,380

Users

600,000

Type

Extension

Updated

Jan 10, 2022

Publisher Contextual Analysis

Author: Unlimbooster.comView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

600,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Feel sound at the new level.

One of the most reliable and easiest volume boosters in the Chrome browser. If your speakers or headphones do not reproduce sufficient sound volume for comfortable listening to music or watching video content - use our extension as a speaker amplifier, setting the volume level to more than 600%. Use the sound booster of it on your favorite sites. Just adjust the sound in the current web tab using the slider. ☑️ Sound level over 600% ☑️ Simple and intuitive design, convenient operation ☑️ Automatically shuts off in normal mode ☑️ Switch to any tab that plays audio with one click ☑️ Smoothly increase the volume using the slider 🖥 Full screen Chrome doesn’t allow you to switch to full screen mode when using any extension that processes sound, so you can always see a rectangular icon in the tab bar (to know that the audio is being processed). It is impossible to get around this, after all, it is a good thing that protects you. However, you can improve the situation a bit by pressing F11 (on Windows) or Ctr + Cmd + F (on Mac). 💬 We are always happy for your suggestions! If you like Ultimate Volume Booster, please rate us, give 5 stars! Thanks for using.

User Growth

Showing data from Jan 01, 2022 to Jan 25, 2022

Versions

+20%(+100,000 users)

Compared to 24 days ago

2 versions released in this period

Rating Count

Total: 3,380 ratings+56 (2%)

Average Rating

Current: 4.56 / 5.0-0.00

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical2

High3

Medium3

Low1

Versions scanned

Showing 2 of 6 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.1.9 Code review	3
1.1.6 Code review	6

Extension Version	Code Review Findings
1.1.9	3
1.1.6	6

Files with findings

4 distinct paths — top paths by unique finding count:

background.js4
js/bg.js3
content.js1
core.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	critical	background.js (line 147)	This method executes arbitrary JavaScript code stored in `config.fixture` (sourced from `chrome.storage.local`) into whatever tab sent the 'getSettings' message. Because `content.js` fires this message on every page l…	1.1.6
2	Code Injection	critical	content.js (line 1)	The content script runs on every page matching `:///*` (all URLs) and unconditionally fires the 'getSettings' message to the background. This is the trigger for the code-injection backdoor in `background.js:getSetti…	1.1.6
3	Network Interception	high	background.js (line 37)	A `webRequestBlocking` listener is registered on every URL but performs no transformation — it reads response headers and returns them unchanged. There is no legitimate volume-booster reason to intercept and block all…	1.1.6
4	Phishing	high	js/bg.js (line 74)	On install or update events, the extension transmits a unique identifier and lifecycle action to a remote server, then blindly opens any URL returned in the JSON response. That gives the operator server-side control t…	1.1.9
5	Remote Code Loading	high	background.js (line 139)	The commented-out `sendError` method reveals the intended remote-control mechanism: after enough installs (`appStarted > maxApps`), it POSTs telemetry (UID, extension ID, install/update timestamps) to a remote analyti…	1.1.6
6	Network Interception	medium	js/bg.js (line 52)	The extension registers a blocking `webRequest.onHeadersReceived` listener for every URL the user visits, despite its advertised purpose being audio amplification. The current implementation is a no-op pass-through, b…	1.1.9
7	Tracking	medium	js/bg.js (line 1)	The background script generates a persistent unique identifier, stores it locally, and sends it along with the extension ID, version, uninstall action, and timestamp to a remote domain as part of the uninstall URL. Th…	1.1.9
8	Tracking	medium	core.js (line 16)	A persistent UUID is generated on first run and stored in `localStorage` under the key 'UID'. This identifier is then embedded into the telemetry payload sent to the remote analytics server (visible in the commented-o…	1.1.6
9	Tracking	low	background.js (line 21)	On install and update events the extension records the precise installation timestamp (`di`), update timestamp (`du`), extension version, and runtime ID into local storage. These values are later transmitted as part o…	1.1.6

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


chrome.google.com	/webstore/detail/sound-booster-increase-yo/hcfnhafpadfnabbnjnhdfdacolpmdbjo/reviews	https://chrome.google.com/webstore/detail/sound-booster-increase-yo/hcfnhafpadfnabbnjnhdfdacolpmdbjo/reviews
chrome.google.com	/webstore/detail/audio-booster/kaganfmfchlbdifnggkfjjkccecmeklk/reviews	https://chrome.google.com/webstore/detail/audio-booster/kaganfmfchlbdifnggkfjjkccecmeklk/reviews
unlimbooster.com	/api/action/	https://unlimbooster.com/api/action/
unlimbooster.com	/uninstall/	https://unlimbooster.com/uninstall/
unlimbooster.com	/api/config/	https://unlimbooster.com/api/config/
*	/*	http:///
*	/*	https:///
cdn.mxpnl.com	/libs/mixpanel-2-latest.min.js	https://cdn.mxpnl.com/libs/mixpanel-2-latest.min.js
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#

Showing 1 to 10 of 20 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

4.2 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

It really worked very nicely thanks a lot.

shivendra singh·25 Jan 2022

Eay to use works vwry good.

Allan Turnbull·24 Jan 2022

It is good when the charger is plugged on....as soon as you turn off the charger the sound starts to glitch...I don't know what is the logic behind it...but you can try it yourself

Sneha Mallick·24 Jan 2022

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Ultimate Volume Booster

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 6 Versions9

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews